mirror of
https://github.com/php/php-src.git
synced 2026-04-25 08:58:28 +02:00
Daniel Lowrey
4a01ddfb55
The CRIME attack vector exploits TLS compression. This patch adds a stream context option allowing servers to disable TLS compression for versions of OpenSSL >= 1.0.0 (which first introduced the SSL_OP_NO_COMPRESSION option). A summary rundown of the CRIME attack can be found at https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls Thanks to @DaveRandom for pointing out the relevant section of code.
The Win32 Build System. See http://wiki.php.net/internals/windows/stepbystepbuild vim:tw=78:sw=1:ts=1:et